znb

gitignore

A collection of useful .gitignore templates

Scanners-Box

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

matrix

matrix (web-based green code rain, made with love)

AutomatedLab

AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.

cloudfox

Automating situational awareness for cloud penetration tests.

MemLabs

Educational, CTF-styled labs for individuals interested in Memory Forensics

CTF

CTF chall write-ups, files, scripts etc (trying to be more organised LOL)

Sentinel-Queries

Collection of KQL queries

Awesome-RedTeam-Cheatsheet

Red Team Cheatsheet in constant expansion.

Beginners-Guide-to-Obfuscation

Awesome-Azure-Pentest

A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.

lemmeknow

The fastest way to identify anything!

Anti-Virus-Evading-Payloads

During the exploitation phase of a pen test or ethical hacking engagement, you will ultimately need to try to cause code to run on target system computers. Whether accomplished by phishing emails, delivering a payload through an exploit, or social engineering, running code on target computers is part of most penetration tests. That means that you will need to be able to bypass antivirus software or other host-based protection for successful exploitation. The most effective way to avoid antivirus detection on your target's computers is to create your own customized backdoor. Here is a simple way to evade anti-virus software when creating backdoors!

Azure_Workshop

elixir-secure-coding

An interactive cybersecurity curriculum designed for enterprise use at software companies using Elixir

EventLogging

Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.

PowerHuntShares

PowerHuntShares is an audit script designed in inventory, analyze, and report excessive privileges configured on Active Directory domains.

aftermath

Aftermath is a free macOS IR framework

cypherhound

Python3 terminal application that contains 400 Neo4j cyphers for BloodHound data sets and 383 GUI cyphers

Spray365

Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The built-in execution plan features options that attempt to bypass Azure Smart Lockout and insecure conditional access policies.

caOptics

CA Optics - Azure AD Conditional Access Gap Analyzer

orca

The Microsoft Defender for Office 365 Recommended Configuration Analyzer (ORCA)

msprobe

Finding all things on-prem Microsoft for password spraying and enumeration.

varc

Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of particular use when investigating a security incident.

Google-Hacking-Database-GHDB

The GHDB is an index of search queries (we call them dorks) used to find publicly available information, intended for pentesters and security researchers.

investigations

smbmap

SMBMap is a handy SMB enumeration tool - here with Kerberos support

Azure-Threat-Research-Matrix

awesome-x6100

A collection for Xiegu X6100-related projects.

IncidentTasksRecipes

Microsoft Sentinel Incident Tasks Recipes